Vulnerability CVE-2020-23647


Published: 2023-04-28

Description:
Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.

 References:
https://github.com/boxbilling/boxbilling/issues/596

Copyright 2026, cxsecurity.com

 

Back to Top